CVE-2020-1666

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions 18.4R1-EVO through 20.2R1-EVO

Description The system console configuration option 'log-out-on-disconnect' fails to log out an active CLI session when the console cable is disconnected, potentially allowing a malicious attacker with physical access to the console to resume a previous interactive session and possibly gain administrative privileges.

Recommendations For Juniper Networks Junos OS Evolved versions 18.4R1-EVO through 20.2R1-EVO, update to version 20.2R1-EVO or later to resolve the issue.